I'm having phishing attacks that just started this morning. Coming from multiple legitimate sites. 

 

When I open a new tab, there is a few second delay then, a different site opens. This has happened with LinkedIn, Weatherbug, several others. Webroot has caught about half of the events. Had to use task manager to close the browser one time.

 

I've dumped all the cached info, run two scans, restarted, etc. etc. Nothing on the scan, and it is still occurring.

 

Any thoughts?

D